<?php

declare(strict_types=1);

/**
 * 用甄养堂账号登录行知（/mcp/sso/*）测试：登录确认页只对登记的客户端和回调地址显示（安全响应头、不可嵌入），
 * 账号密码确认与“绑定甄养堂账号”同一套门禁，已登录后台的一键确认只认电脑端/手机端会话（AI 浏览器、过期会话不行），
 * 授权码要客户端密钥、与回调地址一致、只能用一次，换来的只读令牌可直接使用并替换同一实例的旧授权，审计；
 * 以及原有的绑定接口（/mcp/auth/grant）不受影响。
 *
 * 需要一次性测试库（库名以 _test 结尾，已执行 2026_09_24_ai_mcp.sql）和指向它的运行实例，实例与本测试使用同一组 SSO 配置：
 *   export PHP_AI_MCP_SSO_ENABLED=true PHP_AI_MCP_SSO_CLIENT_ID=xingzhi
 *   export PHP_AI_MCP_SSO_CLIENT_SECRET=<至少 32 位> PHP_AI_MCP_SSO_REDIRECT_URIS=http://127.0.0.1:18787/api/auth/sso/zyt/callback
 *   AI_MCP_TEST_MYSQL=1 AI_MCP_TEST_BASE_URL=http://127.0.0.1:8099 php server/tests/AiMcpSsoTest.php
 * 夹具 ID 段：账号 93201-93204、角色 301-302。
 */

require dirname(__DIR__) . '/vendor/autoload.php';

use think\App;
use think\cache\driver\File as FileCache;
use think\facade\Db;

function aiMcpSsoExpect(bool $condition, string $message): void
{
    if (!$condition) {
        fwrite(STDERR, "FAIL: {$message}\n");
        exit(1);
    }
}

$base = rtrim((string) getenv('AI_MCP_TEST_BASE_URL'), '/');
$secret = (string) getenv('PHP_AI_MCP_SSO_CLIENT_SECRET');
$redirect = trim(explode(',', (string) getenv('PHP_AI_MCP_SSO_REDIRECT_URIS'))[0]);
$clientId = (string) getenv('PHP_AI_MCP_SSO_CLIENT_ID');
if (getenv('AI_MCP_TEST_MYSQL') !== '1' || $base === '' || strlen($secret) < 32 || $redirect === '' || $clientId === '') {
    echo "AiMcpSsoTest SKIP (set AI_MCP_TEST_MYSQL=1, AI_MCP_TEST_BASE_URL, PHP_DATABASE_* for a disposable *_test database and the PHP_AI_MCP_SSO_* settings the server runs with)\n";
    exit(0);
}

$app = new App(dirname(__DIR__) . DIRECTORY_SEPARATOR);
$app->initialize();
$database = (string) config('database.connections.' . config('database.default') . '.database');
aiMcpSsoExpect(str_ends_with($database, '_test'), "refusing to run on database '{$database}' (name must end with _test)");
aiMcpSsoExpect((int) Db::name('system_menu')->where('perms', 'ai.mcp/access')->count() === 1, 'run 2026_09_24_ai_mcp.sql on the test database first');

// ---------------------------------------------------------------- 夹具
$now = time();
$pwd = create_password('Test@123456', (string) config('project.unique_identification'));
Db::name('system_role')->whereIn('id', [301, 302])->delete();
foreach ([301 => 'AI 查询', 302 => '无 AI 权限'] as $id => $name) {
    Db::name('system_role')->insert(['id' => $id, 'name' => $name, 'desc' => 'ai-mcp-sso-test', 'sort' => 0, 'data_scope' => 4, 'create_time' => $now, 'update_time' => $now]);
}
Db::name('system_role_menu')->whereIn('role_id', [301, 302])->delete();
Db::name('system_role_menu')->insert(['role_id' => 301, 'menu_id' => (int) Db::name('system_menu')->where('perms', 'ai.mcp/access')->value('id')]);
// 账号 => [名称, 角色, is_paw, disable]
$admins = [93201 => ['s_doc', '单点医生', 301, 1, 0], 93202 => ['s_noai', '无权限', 302, 1, 0], 93203 => ['s_new', '新账号', 301, 0, 0], 93204 => ['s_off', '已停用', 301, 1, 1]];
Db::name('admin')->whereIn('id', array_keys($admins))->delete();
Db::name('admin_role')->whereIn('admin_id', array_keys($admins))->delete();
Db::name('admin_session')->whereIn('admin_id', array_keys($admins))->delete();
Db::name('ai_grant')->whereIn('admin_id', array_keys($admins))->delete();
Db::name('ai_access_log')->whereIn('admin_id', array_keys($admins))->delete();
Db::name('ai_access_log')->whereIn('tool', ['sso.login', 'sso.approve', 'sso.token'])->where('admin_id', 0)->delete();
foreach ($admins as $id => [$account, $name, $role, $isPaw, $disable]) {
    Db::name('admin')->insert(['id' => $id, 'root' => 0, 'name' => $name, 'avatar' => '', 'account' => $account, 'password' => $pwd, 'multipoint_login' => 1,
        'is_paw' => $isPaw, 'work_wechat_userid' => '', 'disable' => $disable, 'phone' => '1370000' . substr((string) $id, -4), 'create_time' => $now, 'update_time' => $now]);
    Db::name('admin_role')->insert(['admin_id' => $id, 'role_id' => $role]);
}
$pcToken = substr(md5('sso-test-pc-' . $now), 0, 32);
$aiToken = substr(md5('sso-test-ai-' . $now), 0, 32);
$oldToken = substr(md5('sso-test-old-' . $now), 0, 32);
Db::name('admin_session')->insert(['admin_id' => 93201, 'terminal' => 1, 'token' => $pcToken, 'update_time' => $now, 'expire_time' => $now + 3600]);
Db::name('admin_session')->insert(['admin_id' => 93201, 'terminal' => 8, 'token' => $aiToken, 'update_time' => $now, 'expire_time' => $now + 3600]);
Db::name('admin_session')->insert(['admin_id' => 93203, 'terminal' => 1, 'token' => $oldToken, 'update_time' => $now - 7200, 'expire_time' => $now - 60]);
// 服务端（mcp 应用自己的缓存目录）里的错误计数与限流桶，清掉让断言可重复
$cacheOptions = (array) config('cache.stores.file');
$cacheOptions['path'] = app()->getRootPath() . 'runtime' . DIRECTORY_SEPARATOR . 'mcp' . DIRECTORY_SEPARATOR . 'cache';
$serverCache = new FileCache(app(), $cacheOptions);
foreach (array_column($admins, 0) as $account) {
    $serverCache->delete('ai_mcp_grant_fail_' . md5($account));
}
foreach (['sso_ip_', 'sso_token_', 'grant_ip_'] as $bucket) {
    foreach (['127.0.0.1', '::1'] as $ip) {
        $serverCache->delete('ai_mcp_rl_' . $bucket . md5($ip) . '_' . intdiv(time(), 600));
    }
}
\think\facade\Cache::clear();

// ---------------------------------------------------------------- HTTP 工具
function aiMcpSsoHttp(string $method, string $url, ?array $body, array $headers = []): array
{
    $ch = curl_init($url);
    $lines = ['Content-Type: application/json'];
    foreach ($headers as $k => $v) {
        $lines[] = $k . ': ' . $v;
    }
    $responseHeaders = [];
    curl_setopt_array($ch, [CURLOPT_CUSTOMREQUEST => $method, CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTPHEADER => $lines, CURLOPT_TIMEOUT => 60,
        CURLOPT_HEADERFUNCTION => static function ($ch, string $line) use (&$responseHeaders): int {
            $parts = explode(':', $line, 2);
            if (count($parts) === 2) {
                $responseHeaders[strtolower(trim($parts[0]))][] = trim($parts[1]);
            }
            return strlen($line);
        }]);
    if ($body !== null) {
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($body, JSON_UNESCAPED_UNICODE));
    }
    $raw = (string) curl_exec($ch);
    $status = (int) curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
    curl_close($ch);
    return [$status, json_decode($raw, true), $raw, $responseHeaders];
}

$state = 'state-' . bin2hex(random_bytes(8));
$ctx = ['client_id' => $clientId, 'redirect_uri' => $redirect, 'state' => $state];
$page = static fn (array $query) => aiMcpSsoHttp('GET', $base . '/mcp/sso/authorize?' . http_build_query($query), null);
$sso = static fn (string $action, array $body) => (array) (aiMcpSsoHttp('POST', $base . '/mcp/sso/' . $action, $ctx + $body)[1] ?? []);
$codeOf = static function (array $body) use ($redirect, $state): string {
    $url = (string) ($body['data']['redirect'] ?? '');
    aiMcpSsoExpect(str_starts_with($url, $redirect . '?'), 'redirects back to the registered address: ' . json_encode($body, JSON_UNESCAPED_UNICODE));
    parse_str((string) parse_url($url, PHP_URL_QUERY), $query);
    aiMcpSsoExpect(($query['state'] ?? '') === $state && preg_match('/^[0-9a-f]{64}$/', (string) ($query['code'] ?? '')) === 1, 'with the state and a one-time code');
    return (string) $query['code'];
};
$exchange = static fn (string $code, array $override = []) => aiMcpSsoHttp('POST', $base . '/mcp/sso/token',
    $override + ['client_id' => $clientId, 'client_secret' => $secret, 'code' => $code, 'redirect_uri' => $redirect, 'client_instance' => 'sso-test', 'label' => '行知 · 登录']);

// ---------------------------------------------------------------- 登录确认页
[$status, , $html, $headers] = $page($ctx);
aiMcpSsoExpect($status === 200 && str_contains($html, '登录「行知」') && str_contains($html, '<form id="form"'), 'the authorize page shows for the registered client');
$csp = implode(';', $headers['content-security-policy'] ?? []);
aiMcpSsoExpect(str_contains($csp, "frame-ancestors 'none'") && str_contains($csp, "form-action 'none'") && preg_match("/script-src 'nonce-[^']+'/", $csp) === 1, 'strict CSP: ' . $csp);
aiMcpSsoExpect(($headers['x-frame-options'][0] ?? '') === 'DENY' && ($headers['cache-control'][0] ?? '') === 'no-store', 'not frameable, not cached');
aiMcpSsoExpect(!in_array('*', $headers['access-control-allow-origin'] ?? [], true), 'no wildcard CORS on the SSO page: ' . json_encode($headers['access-control-allow-origin'] ?? []));
aiMcpSsoExpect(str_contains($html, json_encode($state)) && !str_contains($html, '<script>alert'), 'state is embedded as JSON');
[$status, , $html] = $page(['redirect_uri' => 'https://evil.example/cb'] + $ctx);
// 只看页面本身（调试模式下框架会在 HTML 后面追加带请求地址的 Trace 面板，生产环境关闭调试）
$main = preg_match('#<main>.*?</main>#s', $html, $found) === 1 ? $found[0] : '';
aiMcpSsoExpect($status === 400 && $main !== '' && !str_contains($html, '<form') && !str_contains($main, 'evil.example'), 'an unregistered redirect gets no form and is not echoed');
[$status, , $html] = $page(['client_id' => 'other'] + $ctx);
aiMcpSsoExpect($status === 400 && !str_contains($html, '<form'), 'an unknown client gets no form');
[$status, , $html] = $page(['state' => ''] + $ctx);
aiMcpSsoExpect($status === 400 && !str_contains($html, '<form'), 'a request without state gets no form');
[$status] = aiMcpSsoHttp('POST', $base . '/mcp/sso/authorize', []);
aiMcpSsoExpect($status === 405, 'the page is GET only');
[$status, , $html] = $page(['client_id' => ['x']] + $ctx);
aiMcpSsoExpect($status === 400, 'array parameters are rejected cleanly');

// ---------------------------------------------------------------- 账号密码确认：与绑定同一套门禁
$body = $sso('login', ['account' => 's_doc', 'password' => 'wrong-password']);
aiMcpSsoExpect(($body['code'] ?? null) === 0 && ($body['data']['reason'] ?? '') === 'invalid_credentials', 'wrong password refused: ' . json_encode($body, JSON_UNESCAPED_UNICODE));
$body = $sso('login', ['account' => 's_noai', 'password' => 'Test@123456']);
aiMcpSsoExpect(($body['data']['reason'] ?? '') === 'no_ai_permission', 'accounts without ai.mcp/access cannot log in to 行知');
$body = $sso('login', ['account' => 's_new', 'password' => 'Test@123456']);
aiMcpSsoExpect(($body['data']['reason'] ?? '') === 'need_change_password' && str_contains((string) $body['msg'], '再登录行知'), 'initial passwords must be changed first: ' . json_encode($body, JSON_UNESCAPED_UNICODE));
$body = $sso('login', ['account' => 's_off', 'password' => 'Test@123456']);
aiMcpSsoExpect(($body['data']['reason'] ?? '') === 'disabled', 'disabled accounts are refused');
$body = (array) (aiMcpSsoHttp('POST', $base . '/mcp/sso/login', ['client_id' => $clientId, 'redirect_uri' => 'https://evil.example/cb', 'state' => $state, 'account' => 's_doc', 'password' => 'Test@123456'])[1] ?? []);
aiMcpSsoExpect(($body['data']['reason'] ?? '') === 'invalid_client', 'the page endpoints check the registered redirect too');
$body = (array) (aiMcpSsoHttp('POST', $base . '/mcp/sso/login', ['client_id' => $clientId, 'redirect_uri' => $redirect, 'account' => 's_doc', 'password' => 'Test@123456'])[1] ?? []);
aiMcpSsoExpect(($body['data']['reason'] ?? '') === 'invalid_request', 'a confirmation needs the state');
$passwordCode = $codeOf($sso('login', ['account' => 's_doc', 'password' => 'Test@123456']));

// ---------------------------------------------------------------- 已登录后台：一键确认只认正常登录
$body = $sso('whois', ['session' => $pcToken]);
aiMcpSsoExpect(($body['code'] ?? null) === 1 && ($body['data']['account'] ?? '') === 's_doc' && ($body['data']['name'] ?? '') === '单点医生', 'whois names the PC login: ' . json_encode($body, JSON_UNESCAPED_UNICODE));
aiMcpSsoExpect(($sso('whois', ['session' => $aiToken])['data']['reason'] ?? '') === 'session_invalid', 'the AI back-office browser session cannot confirm a login');
aiMcpSsoExpect(($sso('whois', ['session' => $oldToken])['data']['reason'] ?? '') === 'session_invalid', 'an expired session cannot confirm a login');
aiMcpSsoExpect(($sso('approve', ['session' => 'not-a-token'])['data']['reason'] ?? '') === 'session_invalid', 'garbage sessions are refused');
aiMcpSsoExpect(($sso('approve', ['session' => ['x']])['data']['reason'] ?? '') === 'session_invalid', 'array sessions are refused cleanly');
$sessionCode = $codeOf($sso('approve', ['session' => $pcToken]));

// ---------------------------------------------------------------- 授权码换令牌
[$status, $body] = $exchange($passwordCode, ['client_secret' => str_repeat('x', 40)]);
aiMcpSsoExpect($status === 401 && ($body['data']['reason'] ?? '') === 'invalid_client', 'a wrong client secret is refused: ' . json_encode($body, JSON_UNESCAPED_UNICODE));
[$status, $body] = $exchange($passwordCode, ['redirect_uri' => 'https://evil.example/cb']);
aiMcpSsoExpect($status === 400 && ($body['data']['reason'] ?? '') === 'invalid_client', 'the redirect address must match the registration');
[$status, $body] = $exchange($passwordCode);
aiMcpSsoExpect($status === 200 && ($body['code'] ?? null) === 1 && (int) ($body['data']['admin']['id'] ?? 0) === 93201 && str_starts_with((string) ($body['data']['token'] ?? ''), 'zyt_ai_'),
    'the code from the password confirmation gives the account and a read-only token: ' . json_encode($body, JSON_UNESCAPED_UNICODE));
$firstGrant = (int) $body['data']['grant_id'];
$firstToken = (string) $body['data']['token'];
[$status, $body] = $exchange($passwordCode);
aiMcpSsoExpect($status === 400 && ($body['data']['reason'] ?? '') === 'invalid_grant', 'a code works once');
[, $who] = aiMcpSsoHttp('GET', $base . '/mcp/auth/whoami', null, ['Authorization' => 'Bearer ' . $firstToken]);
aiMcpSsoExpect(($who['code'] ?? null) === 1 && (int) ($who['data']['admin']['id'] ?? 0) === 93201, 'the token works like a binding grant');
[$status, $body] = $exchange($sessionCode);
aiMcpSsoExpect($status === 200 && ($body['code'] ?? null) === 1, 'the code from the one-click confirmation works too');
$grantRow = Db::name('ai_grant')->where('id', (int) $body['data']['grant_id'])->find();
aiMcpSsoExpect($grantRow && $grantRow['client'] === $clientId && $grantRow['client_instance'] === 'sso-test' && (int) $grantRow['status'] === 1, 'grant stored for the 行知 instance');
aiMcpSsoExpect((int) Db::name('ai_grant')->where('id', $firstGrant)->value('status') === 2, 'logging in again replaces the instance\'s previous grant');
// 授权码签发后账号被停用：兑换时拒绝
$lateCode = $codeOf($sso('approve', ['session' => $pcToken]));
Db::name('admin')->where('id', 93201)->update(['disable' => 1]);
[$status, $body] = $exchange($lateCode);
aiMcpSsoExpect(($body['data']['reason'] ?? '') === 'disabled', 'an account disabled after confirming cannot redeem: ' . json_encode($body, JSON_UNESCAPED_UNICODE));
Db::name('admin')->where('id', 93201)->update(['disable' => 0]);
[$status] = aiMcpSsoHttp('GET', $base . '/mcp/sso/token', null);
aiMcpSsoExpect($status === 405, 'the token endpoint is POST only');

// ---------------------------------------------------------------- 审计与原有绑定接口
$tools = Db::name('ai_access_log')->where('admin_id', 93201)->column('tool');
aiMcpSsoExpect(in_array('sso.approve', $tools, true) && in_array('sso.token', $tools, true), 'confirmations and exchanges are audited');
aiMcpSsoExpect(Db::name('ai_access_log')->where(['tool' => 'sso.login', 'status' => 'denied'])->count() >= 4, 'refused logins are audited');
aiMcpSsoExpect(Db::name('ai_access_log')->where(['tool' => 'sso.token', 'status' => 'denied'])->count() >= 3, 'refused exchanges are audited');
[, $body] = aiMcpSsoHttp('POST', $base . '/mcp/auth/grant', ['account' => 's_doc', 'password' => 'Test@123456', 'client' => 'xingzhi', 'client_instance' => 'grant-test']);
aiMcpSsoExpect(($body['code'] ?? null) === 1 && str_starts_with((string) ($body['data']['token'] ?? ''), 'zyt_ai_'), 'the binding endpoint still issues grants: ' . json_encode($body, JSON_UNESCAPED_UNICODE));
[, $body] = aiMcpSsoHttp('POST', $base . '/mcp/auth/grant', ['account' => 's_new', 'password' => 'Test@123456', 'client' => 'xingzhi']);
aiMcpSsoExpect(($body['data']['reason'] ?? '') === 'need_change_password' && str_contains((string) $body['msg'], '再绑定 AI 助手'), 'and keeps its own wording');

echo "AiMcpSsoTest OK\n";